search

oasis-art-project / oasis-server

Platform for the local arts
Other
2 stars 0 forks source link

Restrict the API so can only be called from production #94

Open codeanticode opened 3 years ago

codeanticode commented 3 years ago

To avoid someone calling the API to create entries in the DB. Some relevant links:

https://stackoverflow.com/questions/52334783/ip-whitelist-function-flask-python3-x/52335449 https://stackoverflow.com/questions/59349847/how-to-whitelist-domain-using-flask-cors https://www.reddit.com/r/flask/comments/e0b5g5/allow_requests_only_from_known_sources/

shishirpy commented 2 years ago

https://stackoverflow.com/questions/21465559/restrict-api-requests-to-only-my-own-mobile-app This suggest that one should focus on authentication.